netVigilance Vulnerability intelligence since 2004

Sitecore

4 Sitecore vulnerabilities with confirmed exploitation in the wild, as published by CISA; 4 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Sitecore
Vulnerability Status
overdue 350d2025-09-25 CVE-2025-53690 Sitecore / Multiple Products Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability 2025-09-04 9.0 past due
overdue 512d2025-04-16 CVE-2019-9875 Sitecore / CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 8.8 past due
overdue 512d2025-04-16 CVE-2019-9874 Sitecore / CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability 2025-03-26 9.8 past due
overdue 1609d2022-04-15 CVE-2021-42237 Sitecore / XP Sitecore XP Remote Command Execution Vulnerability 2022-03-25 9.8 past dueransomware
4 records Open in catalog with filters →